$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer File: A603F8DE41A0C254133C531FFB98C664160BB962.cer (raw, json) Hash identifier: RVccfrG6TB7Q+Q/8+9hnrVDlWgUG/ckseRLdwZOYJ8Y= Subject key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1E786DFF68CB15C5574FD01BB68DED24C3026F8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft caRepository: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 23 Jun 2024 16:44:02 +0000 Certificate not after: Sun 22 Jun 2025 16:49:02 +0000 Subordinate resources: IP: 160.20.244.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:78:6d:ff:68:cb:15:c5:57:4f:d0:1b:b6:8d:ed:24:c3:02:6f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 23 16:44:02 2024 GMT Not After : Jun 22 16:49:02 2025 GMT Subject: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:a3:a7:f8:96:52:65:0f:eb:21:ff:22:15: c7:72:30:f8:c0:7e:7c:f0:39:7d:f9:bf:91:16:94: c7:2a:7d:56:0d:a8:97:63:80:de:94:66:55:bf:d0: 42:5c:ed:2a:03:bb:33:41:ca:5a:55:08:b0:47:63: b7:39:1e:86:3d:31:fe:0c:f4:2a:2c:29:97:1b:b3: 10:fe:88:64:f5:27:1f:4e:11:d2:88:a2:df:df:77: 10:ca:8b:bb:31:d0:75:40:de:35:88:fb:b9:49:54: c1:18:62:1a:fe:69:aa:fd:2e:a1:28:ee:4f:cb:5c: f3:a2:a5:fb:4c:30:40:72:d0:bb:c2:7a:8b:c6:d0: 61:81:d9:7f:e0:5e:0c:fb:55:fe:fb:85:fd:ef:21: 2c:52:7f:22:81:2b:b8:c5:bc:cf:a4:a4:36:c2:45: a6:f2:33:7a:ae:da:e9:55:b2:6d:2a:56:16:a0:b6: b0:85:63:18:08:93:cd:f0:1f:b1:9b:ea:a6:6d:a7: e7:87:32:b9:7b:24:42:6e:e2:f8:e9:cc:67:bd:4d: 44:3f:1a:46:55:6e:29:49:be:9f:cc:52:d2:fb:e0: 7d:a2:55:a3:4b:0a:ef:5a:5d:0d:af:69:34:86:01: 59:64:26:de:60:9c:f5:bd:cd:36:81:dc:f1:5e:ae: 08:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.244.0/24 Signature Algorithm: sha256WithRSAEncryption 97:13:21:22:4a:7b:c4:5b:ca:3c:80:bb:17:76:72:84:d7:64: 69:53:1e:ac:0a:68:61:8b:72:90:08:43:f3:e7:3f:6e:6a:f5: 41:15:ca:03:ca:e5:e7:61:03:7a:ad:2a:bd:0e:a4:5a:75:b1: 0d:cf:7b:a2:db:6a:c4:50:98:ca:7d:e5:cc:51:c0:2a:f1:ae: 7a:14:d4:0b:12:04:a8:25:f9:64:a4:de:9f:cc:c3:d2:bd:85: b1:5f:5d:a5:4c:80:20:5b:83:1c:41:5e:a6:c1:9a:66:a5:10: 73:78:d9:ff:c1:bd:7d:a7:c8:b2:ed:62:63:30:da:52:0b:d1: b7:9a:90:fe:4c:21:18:43:77:b0:4d:49:36:cc:ad:44:c7:43: 70:1a:c9:d9:dc:87:36:ac:fa:4e:47:b9:04:bf:38:2f:13:cf: 14:b5:ea:b3:ef:9f:c9:b5:4f:13:ec:87:5e:f8:c0:64:88:67: ca:4d:4d:64:6f:8b:fb:62:6b:ce:13:da:31:67:27:b6:28:5e: 12:56:41:92:d6:8c:bc:5d:56:e6:5f:9c:5a:2b:8f:36:fb:56: 7e:50:1b:f1:25:73:c9:ec:67:bd:45:cb:01:fb:02:17:52:49: e5:3b:62:55:48:d6:0b:50:18:b9:d4:90:3f:73:b2:ee:31:a8: 5e:05:c9:b0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHnht/2jLFcVXT9Abto3tJMMCb4swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDYyMzE2NDQwMloX DTI1MDYyMjE2NDkwMlowMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1 MzFGRkI5OEM2NjQxNjBCQjk2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDYo6f4llJlD+sh/yIVx3Iw+MB+fPA5ffm/kRaUxyp9Vg2ol2OA3pRmVb/Q QlztKgO7M0HKWlUIsEdjtzkehj0x/gz0KiwplxuzEP6IZPUnH04R0oii3993EMqL uzHQdUDeNYj7uUlUwRhiGv5pqv0uoSjuT8tc86Kl+0wwQHLQu8J6i8bQYYHZf+Be DPtV/vuF/e8hLFJ/IoEruMW8z6SkNsJFpvIzeq7a6VWybSpWFqC2sIVjGAiTzfAf sZvqpm2n54cyuXskQm7i+OnMZ71NRD8aRlVuKUm+n8xS0vvgfaJVo0sK71pdDa9p NIYBWWQm3mCc9b3NNoHc8V6uCK0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKYD+N5BoMJUEzxTH/uYxmQWC7liMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hOWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5YjgxNTJl LWFhODYtNGQ4YS04MWRhLWU3MTA4NmIyOTU2Yy8wL0E2MDNGOERFNDFBMEMyNTQx MzNDNTMxRkZCOThDNjY0MTYwQkI5NjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgFPQwDQYJKoZIhvcNAQELBQADggEBAJcTISJKe8RbyjyAuxd2coTXZGlTHqwK aGGLcpAIQ/PnP25q9UEVygPK5edhA3qtKr0OpFp1sQ3Pe6LbasRQmMp95cxRwCrx rnoU1AsSBKgl+WSk3p/Mw9K9hbFfXaVMgCBbgxxBXqbBmmalEHN42f/BvX2nyLLt YmMw2lIL0beakP5MIRhDd7BNSTbMrUTHQ3Aaydnchzas+k5HuQS/OC8TzxS16rPv n8m1TxPsh174wGSIZ8pNTWRvi/tia84T2jFnJ7YoXhJWQZLWjLxdVuZfnForjzb7 Vn5QG/Elc8nsZ71FywH7AhdSSeU7YlVI1gtQGLnUkD9zsu4xqF4FybA= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org